Balochistan Police Portal Weaponized in Multi-Group Espionage Campaigns
China- and India-linked hacker groups target Pakistani security institutions in coordinated cyber espionage.
1Widespread Cyber Espionage
Security researchers uncovered coordinated cyber espionage activities by China- and India-linked hacker groups against Pakistani law enforcement between 2024-2026. Critical infrastructure including Balochistan Police's complaint management system was compromised.
2Sophisticated Malware Arsenal
Four distinct threat clusters employed custom malware like PlugX, ShadowPad, Cobalt Strike and Remcos RAT. These tools provided access to police databases containing biometric records, criminal case files and personnel information.
3Complaint System Exploitation
Hackers implanted malware disguised as updates in Balochistan Police's citizen complaint portal. Since the system serves both officers and civilians, a wide user base became vulnerable to surveillance and data theft.
4Geopolitical Intelligence Gathering
The attacks spanned a broad geography including Tibetan Buddhist organizations in South Asia. Tactics traditionally associated with Chinese state-sponsored groups were observed in these operations.
5Weakness in Police Digitization
Security flaws in systems established under the Smart Police Station initiative were exploited. Attackers targeted operational intelligence about border security and internal threat responses.
6Cybersecurity as Geopolitical Battleground
Experts attribute the targeting of Pakistani institutions by geopolitical rivals to the value of internal security intelligence. Such coordinated attacks pose serious national security threats requiring enhanced cyber defenses.